@faable/faable 4.18.1 → 4.18.3

package/dist/api/FaableApi.js

@@ -5,6 +5,16 @@ import { create_base_client } from './base_client.js';
 // method (a reset mid-flight means the request was not processed).
 const RESET_CODES = new Set(['ECONNRESET', 'EPIPE']);
 const RETRY_DELAY_MS = 300;
+// The api's 401 codes that mean the credential itself is dead (api
+// `lib/api_error.ts`). No code at all is an old api or the auth layer: treated
+// as dead too, like before.
+const CREDENTIAL_ERRORS = new Set([
+    'unauthorized',
+    'invalid_token',
+    'invalid_apikey',
+    'apikey_expired'
+]);
+const is_credential_error = (code) => !code || CREDENTIAL_ERRORS.has(code);
 const is_connection_reset = (e) => e.isAxiosError &&
     !e.response &&
     (RESET_CODES.has(e.code ?? '') || e.message.includes('socket hang up'));
@@ -86,8 +96,14 @@ class FaableApi {
                 const url = e.config?.url || '';
                 if (res) {
                     // Uniform handling for an expired/invalid session across every
-                    // command, regardless of which endpoint returned the 401.
-                    if (res.status === 401) {
+                    // command, regardless of which endpoint returned the 401. Only
+                    // for a dead credential: the api also answers 401 to a valid one
+                    // that may not do this (`team_or_scope_required`,
+                    // `secrets_access_denied`…), and telling that caller to log in
+                    // again sent them in circles (backlog §374).
+                    if (res.status === 401 &&
+                        is_credential_error(res.data?.error_code ??
+                            res.data?.code)) {
                         // With an API key there is no session to renew: the key itself
                         // is wrong or was revoked (the hosted MCP server runs on keys).
                         const by_key = !!process.env.FAABLE_API_KEY && !process.env.FAABLE_TOKEN;
@@ -236,8 +252,14 @@ class FaableApi {
     async uploadDeploymentLogs(deployment_id, body) {
         return data(this.client.post(`/deployment/${deployment_id}/logs`, body, { timeout: 60_000, maxBodyLength: Infinity, maxContentLength: Infinity }));
     }
-    async getAppSecrets(app_id) {
-        return firstPage(data(this.client.get(`/secret/${app_id}`)));
+    // With the app's project as `x-faable-project`: a user token carries no
+    // project, and the api refuses secrets to a context without one
+    // (`secrets_access_denied`) — `secrets list` failed for every `faable login`
+    // user (backlog §374).
+    async getAppSecrets(app_id, team) {
+        return firstPage(data(this.client.get(`/secret/${app_id}`, {
+            headers: projectHeader(team)
+        })));
     }
     // Replace the app's whole secret set (the endpoint deletes and recreates).
     // This is the only mutation path that triggers an immediate restart of the
@@ -393,4 +415,4 @@ class FaableApi {
     }
 }
 
-export { FaableApi, projectHeader };
+export { FaableApi, is_credential_error, projectHeader };

package/dist/commands/deploy/inspect/list.js

@@ -1,5 +1,6 @@
 import { requireApi } from '../../../api/context.js';
-import { fetch_page, print_json, print, more_hint, list_options } from '../../../lib/listing.js';
+import { requireProject } from '../../../api/project.js';
+import { print_json, print, more_hint, list_options, fetch_page } from '../../../lib/listing.js';
 import { log } from '../../../log.js';
 import { phase_badge } from './format.js';
 
@@ -10,8 +11,21 @@ const apps_list = {
     handler: async (args) => {
         const ctx = await requireApi();
         // Scoped to the active project when there is one (--project,
-        // FAABLE_PROJECT, `faable project use`); every app you can see otherwise.
-        const page = await fetch_page(p => ctx.api.listApps(p), args);
+        // FAABLE_PROJECT, `faable project use`); every app you can see otherwise —
+        // which the api only allows a token with a global scope. Anyone else gets
+        // `team_or_scope_required`: then, like `whoami`, the only project they
+        // belong to, or an error that says how to pick one (backlog §374).
+        const list = () => fetch_page(p => ctx.api.listApps(p), args);
+        let page;
+        try {
+            page = await list();
+        }
+        catch (e) {
+            if (ctx.api.project || e?.code !== 'team_or_scope_required')
+                throw e;
+            ctx.api.project = (await requireProject(ctx.api)).id;
+            page = await list();
+        }
         if (args.json)
             return print_json(page);
         if (page.data.length === 0) {

package/dist/commands/deploy/inspect/logs.js

@@ -61,12 +61,16 @@ const logs = {
         const app_id = await resolve_app_id(args.app, ctx.appId, ctx.api);
         const app = await ctx.api.getApp(app_id);
         if (args.build) {
-            // Build output lives on the deployment. Default to the newest one —
-            // exactly what you want after a red `faable deploy`.
+            // Build output lives on the deployment. Default to the newest one that
+            // was not cancelled — exactly what you want after a red `faable deploy`.
+            // A cancelled redeploy usually never built: picking it answered 404 to
+            // "why did my build fail?" (backlog §374). Only cancelled ones: the
+            // newest anyway.
             let deployment_id = args.deployment;
             if (!deployment_id) {
                 const deployments = await ctx.api.listDeployments(app_id, app.team);
-                deployment_id = deployments[0]?.id;
+                deployment_id = (deployments.find(d => d.status?.phase !== 'CANCELED') ??
+                    deployments[0])?.id;
                 if (!deployment_id) {
                     if (args.json) {
                         return print_json({

package/dist/commands/deploy/remote/follow.js

@@ -5,14 +5,34 @@ const POLL_INTERVAL_MS = 4000;
 // 30min, abandoned janitor 60min) resolve the deployment first in practice.
 const FOLLOW_TIMEOUT_MS = 45 * 60 * 1000;
 const wait = (ms) => new Promise((r) => setTimeout(r, ms));
+/** The clone the platform created to retry this failed build, if any. */
+const retry_of = (deployment) => {
+    const retry = deployment?.runtime_fallback_retry;
+    if (!retry?.deployment_id)
+        return null;
+    // The api stores the clone as bare hex (a `.lean()` ObjectId).
+    const id = retry.deployment_id.startsWith("deployment_")
+        ? retry.deployment_id
+        : `deployment_${retry.deployment_id}`;
+    return { id, to: retry.to };
+};
 /**
  * Follow a remote build until the image handoff: poll the phase and tail the
  * build logs the builder uploads every ~10s (replace semantics → print the
  * suffix beyond what we already showed). Returns on INITIALIZING/READY
  * (image landed — the regular promotion poll takes over); throws on
  * BUILD_ERROR/ERROR with the server-provided reason.
+ *
+ * One exception to "BUILD_ERROR throws": when the platform already retried
+ * the build on the previous Python (`runtime_fallback_retry`, api §12), the
+ * failure is not the outcome — the clone's is. Follow the clone instead and
+ * return ITS id, so the promotion poll and `--json` speak about the deployment
+ * that will go live. Until 2026-10-18 the CLI exited red for a deploy that
+ * was about to succeed (backlog §379).
  */
-const follow_remote_build = async (api, deployment_id, 
+const follow_remote_build = async (api, 
+// `let`: a platform retry switches the follow to its clone.
+initial_deployment_id, 
 // Where the build log goes. stdout for a person; stderr when stdout carries
 // a JSON document (--json, or a program driving the CLI): one build line in
 // front of it and the caller can't parse the outcome — the MCP reported a
@@ -20,6 +40,8 @@ const follow_remote_build = async (api, deployment_id,
 out = process.stdout) => {
     let printed = 0;
     let last_phase = "";
+    let followed_retry = false;
+    let deployment_id = initial_deployment_id;
     const started = Date.now();
     const tail_logs = async () => {
         try {
@@ -49,6 +71,15 @@ out = process.stdout) => {
         }
         await tail_logs();
         if (phase === "BUILD_ERROR" || phase === "ERROR") {
+            const retry = retry_of(deployment);
+            if (retry && !followed_retry) {
+                followed_retry = true;
+                log.info(`↩️ The default Python failed with your dependencies — the platform is retrying on Python ${retry.to} · ${retry.id}`);
+                deployment_id = retry.id;
+                printed = 0;
+                last_phase = "";
+                continue;
+            }
             const reason = deployment?.status?.reason;
             throw new Error(`Remote build failed${reason ? `: ${reason}` : ""}`.trim());
         }
@@ -56,7 +87,7 @@ out = process.stdout) => {
         // already live (READY) — the promotion poll takes over from here.
         if (phase === "INITIALIZING" || phase === "READY") {
             await tail_logs();
-            return;
+            return { id: deployment_id };
         }
         await wait(POLL_INTERVAL_MS);
     }

package/dist/commands/deploy/remote/index.js

@@ -34,7 +34,12 @@ const deploy_remote = async (props) => {
     });
     props.on_deployment?.(deployment.id);
     log.info(`Preparing to build in faable cloud · ${deployment.id}`);
-    await follow_remote_build(api, deployment.id, props.log_stream);
+    const landed = await follow_remote_build(api, deployment.id, props.log_stream);
+    // The platform retried the build on the previous Python (§12): what goes
+    // live is the clone, so the promotion poll must wait for IT.
+    if (landed.id !== deployment.id) {
+        return await api.getDeployment(landed.id);
+    }
     return deployment;
 };
 

package/dist/commands/deploy/secrets/list.js

@@ -25,7 +25,8 @@ const secrets_list = {
     handler: async (args) => {
         const ctx = await requireApi();
         const app_id = await resolve_app_id(args.app, ctx.appId, ctx.api);
-        const secrets = await ctx.api.getAppSecrets(app_id);
+        const app = await ctx.api.getApp(app_id);
+        const secrets = await ctx.api.getAppSecrets(app_id, app.team);
         // The whole set in one response (the api doesn't page secrets). Values
         // stay masked unless --show, in JSON as on screen.
         if (args.json) {

package/dist/commands/deploy/secrets/rm.js

@@ -34,7 +34,7 @@ const secrets_rm = {
         // remaining set first — this also rejects unknown names and secrets
         // inherited from the team profile.
         const app = await ctx.api.getApp(app_id);
-        const secrets = await ctx.api.getAppSecrets(app_id);
+        const secrets = await ctx.api.getAppSecrets(app_id, app.team);
         const remaining = remove_app_secret(secrets, args.name);
         const go = await confirm({
             message: `Remove secret "${args.name}" from ${app_id}?`,

package/dist/commands/deploy/secrets/set.js

@@ -111,7 +111,7 @@ const secrets_set = {
         // getApp also validates access to the app and provides the team the
         // batch endpoint requires as request context.
         const app = await ctx.api.getApp(app_id);
-        const existing = await ctx.api.getAppSecrets(app_id);
+        const existing = await ctx.api.getAppSecrets(app_id, app.team);
         const merged = merge_app_secrets(existing, parsed);
         await ctx.api.createSecretsBatch(app.id, app.team, merged);
         const current = new Map(existing

package/dist/mcp/tools.js

@@ -233,7 +233,7 @@ const TOOLS = [
     {
         name: 'get_build_logs',
         title: 'Read build logs',
-        description: 'The build output of a deployment — the first thing to read when a deploy failed and the user asks why. The cause is usually at the end. Without `deployment`, the newest one.',
+        description: 'The build output of a deployment — the first thing to read when a deploy failed and the user asks why. The cause is usually at the end. Without `deployment`, the newest one that was not cancelled.',
         input: {
             app,
             project,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@faable/faable",
-  "version": "4.18.1",
+  "version": "4.18.3",
   "main": "dist/index.js",
   "license": "MIT",
   "author": "Marc Pomar <marc@faable.com>",